use:
 select etag from ACL for update

That will eliminate the race condition.